CVS: cvs.openbsd.org: ports

CVSROOT:	/cvs
Module name:	ports
Changes by:	brad@cvs.openbsd.org	2003/07/18 19:27:13

Modified files:
	net/ucd-snmp   : Tag: OPENBSD_3_2 Makefile 
Added files:
	net/ucd-snmp/patches: Tag: OPENBSD_3_2 
	                      patch-apps_snmpnetstat_if_c 

Log message:
A remote heap overflow was discovered in snmpnetstat by Axioma Security Research. When a list of interfaces is requested, a malicious server can return information in a way that will cause a heap overflow in snmpnetstat.

A remote atacker able to control a snmp server can exploit this vulnerability to execute arbitrary code with the privileges of the user running snmpnetstat.

http://marc.theaimsgroup.com/?l=bugtraq&m=101008893718720&w=2 Received on Fri Jul 18 21:45:17 2003